Update argument order for Express Response redirect #229

This is to address issue #229, making response code argument first when used as per latest Express documentation and Connect middleware.

Benefit is this makes Passport more compatible with non-Express frameworks.